Latest digest
Hackers Use Stolen Entra ID, Azure DevOps Credentials Against 27 Orgs
Stolen Entra ID credentials hit 27 orgs, AI-assisted research finds 40+ OpenEMR flaws, and infostealers target AI tool tokens in this digest.
In this digest
Active exploits, new CVEs, threat research, and vendor advisories
Cyber Hose
The security firehose, filtered. Our intel pipeline monitors dozens of sources around the clock and distills what matters into digests you can actually keep up with.
Latest digests
Fresh from the pipeline, newest first.
Read digest
Hackers Hijack French Blood Plasma Freezers via Cooling Vendor
Hackers altered French blood plasma freezer setpoints via a compromised cooling vendor, plus ASUS router CVEs and Chinese EVs bricked in Russia.
In this digest
WordPress Core TOCTOU race condition enables unauthenticated RCE
WordPress Core RCE during upgrades headlines this run, alongside a cPGuard supply-chain attack and a critical Chrome Android RCE.
In this digest
Binance: Fake Job Interviews and AI Tool Abuse Led to $6.43B Theft
North Korean hackers stole $6.43B from Binance via fake job interviews and AI tool abuse, alongside breaches at Chainstack and DreamHost.
In this digest
Critical Node-RED flaw exploited to deploy Linux bot and webshells
A CVSS 10.0 Node-RED flaw is under active exploitation, plus a 1.3M-record school breach and an AI-assisted ransomware attack.
In this digest
StyleSmuggler zero-day deploys PSK Agent RAT on Magento stores
A CVSS 10.0 Adobe Commerce zero-day heads this run, plus a cPGuard supply-chain attack and a Harvard breach affecting 851,000 accounts.
In this digest
Critical Siemens SIMATIC IoT2050 flaw exploited to plant backdoors
A CVSS 10.0 Siemens SIMATIC IoT2050 flaw is actively exploited to deploy botnet implants, plus an unpatched WordPress plugin CVE.
In this digest
Supermarket fridges forced to defrost across seven European countries
Hackers remotely triggered defrost cycles in supermarket refrigeration controllers across Europe, spoiling food worth millions of euros.
In this digest
Google disrupts 1.3M-device XCPE Android TV botnet, bans Videostrong
Google dismantled a 1.3M-device Android TV botnet with firmware-level backdoors, while Abrigo and Mercado Bitcoin respond to major incidents.
In this digest
Hackers disrupt supermarket refrigeration across Europe
European supermarket refrigeration attacks hit 115+ stores, Florida breach exposes 4.9M records, and critical Langflow RCE flaws get Metasploit modules.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check